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DETAILED ACTION 

1. This action is in response to the communication filed on May 16, 2005. 

Continued Examination Under 37 CFR 1.114 

2. A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.1 14. 

3. Applicant's submission filed on May 16, 2005 has been entered and made of 
record. Claims 1-19 and 25 - 43 are pending. 

Information Disclosure Statement 



4. An initialed copy of the information disclosure statement, filed on May 16, 2005 is 
attached to this office action. 
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Response to Arguments 

5. Applicant's arguments filed on May 16, 2005, have been fully considered but they 
are not persuasive for the following reasons: 

Claim Rejections - 35 USC § 101 

35 U.S. C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

6. Claims 1 - 19 are rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. Claims 1 states, "authentication 
detecting..., transmitting .., authenticating the authentication token... and providing 
These limitations are considered non-statutory subject matter because they consist on 
software process steps without any application to a hardware device. 

Dependent claims 2 - 19 are rejected based on their dependency from Claim 1 . 

To expedite a complete examination of the application, the claims rejected under 
35 U.S.C. 101 (non-statutory) above are further rejected (or objected) as set forth below 
in anticipation of applicant amending these claims to place them within the four statutory 
categories of invention. 
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Claim Rejections - 35 USC §112 

The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

7. Claims 1-19 and 25-43 are rejected under 35 U.S.C. 112, first paragraph, as 
failing to comply with the written description requirement. The claim(s) contains subject 
matter which was not described in the specification in such a way as to reasonably 
convey to one skilled in the relevant art that the inventor(s), at the time the application 
was filed, had possession of the claimed invention. 

The amended independent Claims 1 and 25 read, " ...providing a first type of 
service session and "a second type of service session 

8. With respect to "a first type of service" and "a second type of service session", 
although the specification discloses a method and system for single sing-on a user 
access to multiple web servers, the user having a service selector, constructing an 
authentication token and if the expiration time has not passed, a second web server 
allows the user to conduct a session at the second web server, the specification does 
not disclose, "a first type of service session and "a second type of service session". 
Applicant remarks/arguments merely recites the amended Claims 1 and 25 and does 
not clarify "a first type of service session and "a second type of service session", but 
directs to Page 4 lines 25 - Page 12 line 24 of instant application specification, which 
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does not disclose "a first type of service session and "a second type of service 
session". 

Examiner broadly interprets "a first type of service session and "a second 
type of service session" as authenticating a user to create an encrypted authentication 
token and redirecting a web browser of the user to transmit the encrypted authentication 
token. 

The dependent claims 2-19 and 26 - 43 are rejected at least by virtue of their 
dependency on the dependent claims. 

9. Samsazel et al. (U.S. Patent 6,263,432) teach an electronic ticketing, 
authentication and/or authorization security system which enables a user with an eticket 
(encrypted authentication information), to be authenticated and authorized for a 
requested service. Sasmazel furthermore, teach that the user need not re-authenticate 
each time a new server is accessed. 

10. Regarding independent amended claims 1 and 25, applicant argued that cited 
prior art, Sasmazel does not teach, "the first web server also providing a first type of 
service session functionality for the user in addition to an authentication functionality" 
and "for a second type of service session functionality for the user at said first web 
server that is not provided by the first web server., providing the second type of session 
functionality for the user". These arguments are not found persuasive. 
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Applicant agrees that Sasmazel teaches authenticating a user by an 
authentication server after receiving a user's request and applicant also agrees that the 
eticket includes the user's authentication and authorization information. Sasmazel 
discloses authenticating a user at a first server (Column 2 lines 19-59 and Column 7 
line 39 - Column 8 line 55); detecting a client request at said first server, said first 
server determining a second server related to the request and in response thereto 
creating an encrypted authentication token related to the user and redirecting a web 
browser of the user to the second server (Column 2 lines 19-59; Column 6 line 10 - 
39; and Column 10 lines 9 - 50); transmitting the encrypted token from the first server to 
the second server via the user's web browser, wherein the authentication token 
comprises an expiration time and is digitally signed by the first server (Column 2 lines 
19-64 and Column 7 lines 18 - 67); authenticating the authentication token at the 
second server (Column 2 lines 19-64 and Column 8 line 1 - Column 9 line 28); and 
allowing the user to conduct a session at the second server (Column 9 lines 10 - 33). 
Sasmazel clearly teaches that a user does not have to "re-authenticate" each time a 
new server is accessed (Column 8 lines 42 - 52 and Column 9 lines 20 - 32). 

1 1 . Applicant clearly has failed to explicitly identify specific claim limitations, which 
would define a patentable distinction over prior arts. Therefore, the examiner 
respectfully asserts that prior art does teach or suggest the subject matter broadly 
recited in independent claims 1 and 25. Dependent claims 2-19 and 26 - 43 are also 
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rejected at least by virtue of their dependency on independent claims and by other 
reason set forth in this office action. 

Accordingly, the rejection for the pending Claims 1 - 19 and 26 - 43 is 
respectfully maintained. 



Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent 
by another filed in the United States before the invention thereof by the applicant 
for patent, or on an international application by another who has fulfilled the 
requirements of paragraphs (1), (2), and (4) of section 371(c) of this title before 
the invention thereof by the applicant for patent. 



12. Claims 1-48 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Sasmazel et al. (U.S. Patent No.: 6,263,432). 

Regarding Claim 1, Sasmazel teaches and describes 

authenticating a user by a first web server, the first web server also providing a 
first type of service session functionality for the user in addition to an authenticating 
functionality (Column 2 lines 1 9 - 59 and Column 7 line 39 - Column 8 line 55); 
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detecting a client request for a second type of service session functionality for the 
user at said first web server that is not provided by the first web server, said first web 
server, for determining a second web server providing the second type of session 
functionality for the user and in response thereto creating an encrypted authentication 
token related to the user and redirecting a web browser of the user to the second web 
server (Column 2 lines 1 9 - 59; Column 6 line 1 0 - 39; and Column 1 0 lines 9 - 50); 

transmitting the encrypted token from the first web server to the second web 
server via the user's web browser, wherein the authentication token comprises an 
expiration time and is digitally signed by the first web server (Column 2 lines 1 9 - 64 
and Column 7 lines 18 - 67); 

authenticating the authentication token by the second web server (Column 2 
lines 19-64 and Column 8 line 1 - Column 9 line 28); and 

providing the second type of service session functionality for the user to conduct 
a session by the second web server (Column 9 lines 10 - 33). 

Regarding Claim 25, Sasmazel teaches and describes 

a means for authenticating a user by a first web server, the first web server also 
providing a first type of service session functionality for the user in addition to an 
authenticating functionality (Column 2 lines 19-59 and Column 7 line 39 - Column 8 
line 55); 

means for detecting a client request for a second type of service session 
functionality for the user at said first web server, said first web server that is not 
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provided by the first web server, said first web server, for determining a second web 
server providing the second type of session functionality for the user and in response 
thereto creating an encrypted authentication token related to the user and redirecting a 
web browser of the user to the second web server (Column 2 lines 1 9 - 59; Column 6 
line 10-39; and Column 10 lines 9-50); 

a means for transmitting the encrypted token from the first web server to the 
second web server via the user's web browser, wherein the authentication token 
comprises an expiration time and is digitally signed by the first web server (Column 2 
lines 19-64 and Column 7 lines 18-67); 

a means for authenticating the authentication token at the second web server 
(Column 2 lines 19-64 and Column 8 line 1 - Column 9 line 28); and 

a means for providing the second type of service session functionality for the 
user to conduct a session by the second web server (Column 9 lines 10 - 33). 

Claim 2 is rejected as applied above in rejecting claim 1. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Cblumn 10 lines 10 - 30), wherein the first web server and the second web 
server share a sub-domain (Fig. 2 #220, #240 and Column 6 lines 10-40 and Column 
10 lines 10-30). 

Claim 26 is rejected as applied above in rejecting claim 25. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
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web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the first web 
server and the second web server share a sub-domain (Fig. 2 #220, #240 and Column 
6 lines 10-40 and Column 10 lines 10-30). 

Claim 39 is rejected as applied above in rejecting claim 25. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further 
comprising: 

a means for sending the digitally signed authentication token to the web browser 
of the computing device by the first web server (Column 7 lines 39 - Column 8 lines 58); 
and 

a means for sending the authentication token to the second web server by the 
web browser (Fig. 7 and Column 8 lines 57 - Column 9 line 9). 

Claim 3 is rejected as applied above in rejecting claim 2. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10 - 30), further comprising examining the expiration time 
of the authentication token at the second web server and allowing the user to conduct a 
session at the second web server only if the expiration time has not passed (Fig. 3 #302 
and Column 9 lines 10 - 32). 
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Claim 27 is rejected as applied above in rejecting claim 26. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further comprising a 
means for examining the expiration time of the authentication token at the second web 
server (Column Fig. 3 #302; Column 7 lines 45 - 47 and Column 9 lines 10-17). 

Claim 40 is rejected as applied above in rejecting claim 39. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further 
comprising a means for allowing the user to conduct a session with the first web server 
(Fig. 2 #220 and Column 6 lines 1 0 - Column 9 line 1 5). 

Claim 4 is rejected as applied above in rejecting claim 3. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10 - 30), wherein the authentication token comprises a 
cookie (Column 6 lines 10 - 57). 

Claim 28 is rejected as applied above in rejecting claim 27. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the 
authentication token comprises a cookie (Column 6 lines 10 - 57). 
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Claim 41 is rejected as applied above in rejecting claim 40. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein 
the second web server shares a sub-domain with the first web server (Fig. 2 #220, #240 
and Column 6 lines 1 0 - 40 and Column 1 0 lines 1 0 - 30). 

Claim 5 is rejected as applied above in rejecting claim 4. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10 - 30), wherein transmitting the encrypted authentication 
token from the first web server to the second web server comprises transmitting the 
encrypted authentication token from the first web server to the user, and then from the 
user to the second web server (Column 8 lines 42 - 58). 

Claim 29 is rejected as applied above in rejecting claim 28. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the means for 
transmitting the encrypted authentication token from the first web server to the second 
web server comprises means for transmitting the encrypted authentication token from 
the first web server to the user, and then from the user to the second web server 
(Column 8 lines 42 - 58). 
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Claim 42 is rejected as applied above in rejecting claim 41. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further 
comprising means for digitally signing the authentication token using public key 
encryption (Fig. 3 #306 Column 7 lines 18 - 54). 

Claim 6 is rejected as applied above in rejecting claim 5. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10 - 30), wherein authenticating the user at the first web 
server comprises receiving a user name and password (Fig. 6 and Column 8 lines 1 - 
5). 

Claim 30 is rejected as applied above in rejecting claim 29. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the means for 
authenticating the user at the first web server comprises receiving a user name and 
password (Fig. 6 and Column 8 lines 1 - 5). 

Claim 43 is rejected as applied above in rejecting claim 42. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further 
comprising a means for confirming a match with the digital signature (Fig. 13, Column 6 
lines 44 - Column 9 line 28). 
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Claim 7 is rejected as applied above in rejecting claim 6. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10 - 30), wherein transmitting the encrypted authentication 
token from the first web server to a second web server comprises transmitting the 
authentication token from the first web server to a computer of the user; and 
transmitting the authentication token from the computer of the user of the second web 
server (Column 8 lines 42 - 58). 

Claim 31 is rejected as applied above in rejecting claim 30. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein transmitting 
the encrypted authentication token from the first web server to a second web server 
comprises means for transmitting the authentication token from the first web server to a 
computer of the user; and means for transmitting the authentication token from the 
computer of the user of the second web server (Column 8 lines 42 - 58). 

Claim 8 is rejected as applied above in rejecting claim 7. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10 - 30), wherein the first web server and the second web 
server comprise a federation of web servers (Column 6 lines 10-40, Column 8 lines 46 
- 50 and Column 1 0 lines 40 - 50). 
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Claim 32 is rejected as applied above in rejecting claim 31. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the first web 
server and the second web server comprise a federation of web servers (Column 6 lines 
1 0 - 40, Column 8 lines 46 - 50 and Column 1 0 lines 40 - 50). 

Claim 9 is rejected as applied above in rejecting claim 8. Furthermore, Sasmazel 
teaches and describes a method of single sigh-on user access to multiple web servers 
(Fig. 7 and Column 10 lines 10-30), wherein authenticating the authentication token at 
the second web server comprises examining the cookie (Column 8 lines 46 - 60 and 
Column 9 lines 10-15). 

Claim 33 is rejected as applied above in rejecting claim 32. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the means for 
authenticating the authentication token at the second web server comprises means for 
examining the cookie (Column 8 lines 46 - 60 and Column 9 lines 10-15). 

Claim 10 is rejected as applied above in rejecting claim 9. Furthermore, 
Sasmazel teaches and describes a method of single sigh-on user access to multiple 
web servers (Fig. 7 and Column 1 0 lines 1 0 - 30), further comprising URL encoding the 
authentication token (Column 6 lines 10-23 and Column 7 lines 38 - 67). 



Application/Control Number: 09/668, 1 1 2 Page 1 6 

Art Unit: 2136 

Claim 34 is rejected as applied above in rejecting claim 33. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further comprising a 
means for URL encoding the authentication token (Column 6 lines 10-23 and Column 
7 lines 38-67). 

Claim 1 1 is rejected as applied above in rejecting claim 10. Furthermore, 
Sasmazel teaches and describes a method of single sigh-on user access to multiple 
web servers (Fig. 7 and Column 10 lines 10 - 30), further comprising URL decoding the 
authentication token at the second web server (column 9 lines 10 - 32). 

Claim 35 is rejected as applied above in rejecting claim 34. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further comprising a 
means for URL decoding the authentication token at the second web server (column 9 
lines 10-32). 

Claim 12 is rejected as applied above in rejecting claim 1 1 . Furthermore, 
Sasmazel teaches and describes a method of single sigh-on user access to multiple 
web servers (Fig. 7 and Column 10 lines 10-30), further comprising providing a web 
page to the user having a service selector (Column 6 lines 10 - 40). 



Application/Control Number: 09/668, 1 1 2 Page 1 7 

Art Unit: 2136 

Claim 36 is rejected as applied above in rejecting claim 35. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), further comprising 
providing a web page to the user having a service selector (Column 6 lines 10 - 40). 

Claim 13 is rejected as applied above in rejecting claim 12. Furthermore, 
Sasmazel teaches and describes a method of single sigh-on user access to multiple 
web servers (Fig. 7 and Column 10 lines 10 - 30), wherein the service selector 
comprises a hyperlink (Fig. 7 and Column 6 lines 10 - 23). 

Claim 37 is rejected as applied above in rejecting claim 36. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the service 
selector comprises a hyperlink (Fig. 7 and Column 6 lines 10 - 23). 

Claim 14 is rejected as applied above in rejecting claim 13. Furthermore, 
Sasmazel teaches and describes a method of single sigh-on user access to multiple 
web servers (Fig. 7 and Column 10 lines 10 - 30), wherein the hyperlink comprises a 
URL for the second web server (Column 6 lines 10 - 40). 

Claim 38 is rejected as applied above in rejecting claim 37. Furthermore, 
Sasmazel teaches and describes, a system for single sign-on user access to multiple 
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web servers (Fig. 7 and Column 4 lines 15 - Column 10 line 40), wherein the hyperlink 
comprises a URL for the second web server (Column 6 lines 1 0 - 40). 

Claim 15 is rejected as applied above in rejecting claim 7. Furthermore, 
Sasmazel teaches and describes, a method for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 10 lines 10 - 30), comprising: 

sending the digitally signed authentication token to the web browser of the 
computing device by the first web server (Column 7 lines 39 - Column 8 line 58); and 

sending the authentication token to the second web server by the web browser 
(Fig. 7 and Column 8 lines 57 - Column 9 line 9). 

Claim 16 is rejected as applied above in rejecting claim 15. Furthermore, 
Sasmazel teaches and describes, a method for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 10 lines 10 - 30), further comprising 
allowing the user to conduct a session with the first web server (Fig. 2 #220 and Column 
6 lines 1 0 - Column 9 line 1 5). 

Claim 17 is rejected as applied above in rejecting claim 16. Furthermore, 
Sasmazel teaches and describes, a method for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 10 lines 10-30), wherein the second 
web server shares a sub-domain with the first web server (Fig. 2 #220, #240 and 
Column 6 lines 10-40 and Column 10 lines 10 - 30). 
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Claim 18 is rejected as applied above in rejecting claim 17. Furthermore, 
Sasmazel teaches and describes, a method for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 10 lines 10-30), further comprising 
digitally signing the authentication token using public key encryption (Fig. 3 #306 
Column 7 lines 18 - 54). 

Claim 19 is rejected as applied above in rejecting claim 18. Furthermore, 
Sasmazel teaches and describes, a method for single sign-on user access to a 
federation of web servers (Fig. 7 and Column 10 lines 10 - 30), further comprising 
confirming a match with the digital signature (Fig. 13, Column 6 lines 44- Column 9 line 
28). 

Conclusion 

13. Examiner's Note: Examiner has cited particular columns and line numbers in the 
references as applied to the claims above for the convenience of the applicant. 
Although the specified citations are representative of the teachings in the art and are 
applied to the specific limitations within the individual claim, other passages and figures 
may apply as well. It is respectfully requested from the applicant, in preparing the 
responses, to fully consider the references in entirety as potentially teaching all or part 
of the claimed invention, as well as the context of the passage as taught by the prior art 
or disclosed by the examiner. 
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14. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. See PTO Form 892. 

Applicant is urged to consider the references. However, the references should be 
evaluated by what they suggest to one versed in the art, rather than by their specific 
disclosure. If applicants are aware of any better prior art than those are cited, they are 
required to bring the prior art to the attention of the examiner. 

15. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Pramila Parthasarathy whose telephone number is 571- 
272-3866. The examiner can normally be reached on 8:00a.m. To 5:00p.m.. If attempts 
to reach the examiner by telephone are unsuccessful, the examiner's supervisor, Ayaz 
Sheikh can be reached on 571-232-3795. Any inquiry of a general nature or relating to 
the status of this application or proceeding should be directed to the receptionist whose 
telephone number is 703-305-3900. 
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